The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
arch/arm64/kvm/guest.c in KVM in the Linux kernel before 4.18.12 on the arm64 platform mishandles the KVM_SET_ON_REG ioctl. This is exploitable by attackers who can create virtual machines. An attacker can arbitrarily redirect the hypervisor flow of control (with full register control). An attacker can also cause a denial of service (hypervisor panic) via an illegal exception return. This occurs because of insufficient restrictions on userspace access to the core register file, and because PSTATE.M validation does not prevent unintended execution modes.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Apr 27, 2020 | Oct 7, 2018 |
| Amazon_linux | — | Upgrade kernel | Nov 8, 2018 | Oct 7, 2018 |
| Centos_linux | — | Upgrade kernel | Aug 28, 2019 | Oct 7, 2018 |
| Debian | — | Upgrade linux | Oct 10, 2018 | Oct 7, 2018 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 21, 2020 | Oct 3, 2018 |
| Redhat_linux | — | Upgrade kernel | Nov 27, 2018 | Oct 7, 2018 |
| Ubuntu | — | Upgrade linux-image-4.15.0-47-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-139-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-139-lowlatencyUpgrade linux-image-4.15.0-1035-awsUpgrade linux-image-4.15.0-1010-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-47-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-47-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1104-snapdragonUpgrade linux-image-4.4.0-139-genericUpgrade linux-image-kvmUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.15.0-1029-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-4.15.0-47-genericUpgrade linux-image-4.4.0-1037-kvmUpgrade linux-image-4.4.0-139-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1035-oemUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1072-awsUpgrade linux-image-powerpc-smpUpgrade linux-image-aws-hweUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-1034-awsUpgrade linux-image-4.4.0-139-powerpc-e500mcUpgrade linux-image-4.4.0-139-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1041-azureUpgrade linux-image-4.15.0-1033-raspi2Upgrade linux-image-4.15.0-1031-kvmUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-4.4.0-1100-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-139-powerpc64-smp | Nov 23, 2018 | Oct 7, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub